QUESTION 96Hotspot QuestionYour company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has IP Address Management (IPAM) installed. IPAM has the following configuration.

The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit.(Click the Exhibit button.)

The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.)For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

QUESTION 97Drag and Drop QuestionYour network contains an Active Directory domain named contoso.com.The domain contains a server named Server1 that runs Windows Server 2016.You install IP Address Management (IPAM) on Server1.You need to manually start discovery of servers that IPAM can manage in contoso.com.Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Answer:

Explanation:Step 1: Invoke-IpamServerProvisioningChoose a provisioning methodThe Invoke-IpamGpoProvisioning cmdlet creates and links three group policies specified in the Domain parameter for provisioningrequired access settingson the server roles managed by the computer running the IP Address Management (IPAM) server.Step 2: Add-IpamDiscoveryDomainConfigure the scope of discoveryThe Add-IpamDiscoveryDomain cmdlet adds an Active Directory discovery domain for an IP AddressManagement (IPAM) server. A discovery domain is a domain that IPAM searches to find infrastructure servers. An IPAM server uses the list of discovery domains to determine what type of servers to add. By default, IPAM discovers all domain controllers, Dynamic Host Configuration Protocol (DHCP) servers, and Domain Name System (DNS) servers.Step 3: Start-ScheduledTaskStart server discoveryTo begin discovering servers on the network, click Start server discovery to launch the IPAM ServerDiscovery task or use the Start-ScheduledTask command.

QUESTION 98Hotspot QuestionYour network contains an Active Directory domain named contoso.com.The domain contains two servers named Server1 and Server2 that run Windows Server 2016.Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.The domain has two users named User1 and User2 and a group named Group1. User1 is the only member of Group1.Server1 has one IPAM access policy. You edit the access policy as shown in the Policy exhibit. (Click the Exhibit button.)

The DHCP scopes are configured as shown in the Scopes exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

QUESTION 99Hotspot QuestionYou have a server named Server1 that runs Windows Server 2016.Server1 has the Web Application Proxy role service installed.You need to publish Microsoft Exchange Server 2013 services through the Web Application Proxy. The solution must use preauthentication whenever possible.How should you configure the preauthentication method for each service? To answer, select the appropriate options in the answer area.

Answer:

Explanation:Box 1: Pass-throughBox 2: Active Directory Federation Services (ADFS) Box 3: Pass-throughThe following table describes the Exchange services that you can publish through Web Application Proxy and the supported preauthentication for these services:

QUESTION 100Drag and Drop QuestionYou network contains an Active Directory domain named contoso.com.The domain contains an enterprise certification authority (CA).A user named Admin1 is a member of the Domain Admins group.You need to ensure that you can archive keys on the CA. The solution must use Admin1 as a key recovery agent.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

QUESTION 101Hotspot QuestionYour network contains an Active Directory domain named contoso.com.The domain contains three servers named Server1, Server2, and Server3 that run Windows Server 2016.Server1 has IP Address Management (IPAM) installed. Server2 and Server3 have the DHCP Server role installed and have several DHCP scopes configured.The IPAM server retrieves data from Server2 and Server3.A domain user named User1 is a member of the groups shown in the following table.

On Server1, you create a security policy for User1. The policy grants the IPAM DHCP Scope Administrator Role with the \Global access scope to the user.Which actions can User1 perform? To answer, select the appropriate options in the answer area.

QUESTION 102Hotspot QuestionYour network contains an Active Directory domain named contoso.com.The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2016.Server1 has IP Address Management (IPAM) installed. Server2, Server3, and Server 4 have the DHCP Server role installed. IPAM manages Server2, Server3, and Server4.A domain user named User1 is a member of the groups shown in the following table.

Which actions can User1 perform? To answer, select the appropriate options in the answer area.

QUESTION 103Hotspot QuestionYour network contains an Active Directory domain named contoso.com.You have an administrative computer named Computer1 that runs Windows Server 2016.From Computer1, you edit a Group Policy object (GPO) named GPO1 as shown in the exhibit.

You receive a new administrative template named Template1.Template1 consists of Template1.adml. Template1 is in English US.You need to ensure that the settings of Template1 appear under the Administrative Templates node.To where should you copy the Template1 files? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

QUESTION 104You have a server named Server1.A Microsoft Azure Backup of Server1 is created automatically every day.You rename Server1 to Server2. You discover that backups are no longer created in Azure.You need to backup the server to Azure.What should you do?

A. From the Azure Management Portal, upload the Server2 certificate as a management certificate.B. On Server2, run the Start-OBRegistration cmdlet.C. On Server2, run the Add-WBBackupTarget cmdlet.D. From the Azure Management Portal, modify the configuration on the backup vault.

QUESTION 105You need to verify whether a DNS response from a DNS server is signed by DNSSEC.What should you run?

A. Nslookup.exeB. Dnscmd.exeC. Get-NetIPAddressD. Resolve-DNSName

Answer: D

QUESTION 106You havea dns server named server1 that runs Windows Server 2016.You need to disable recursion on Server1What are three possible ways to achive the goal? Each correct answer presents a complete solution.

A. Create a reverse lookup zone named 0.in-addr.arpa.B. Create a forward lookup zone named globalnamesC. From dns manager,modify the advanced properties of server1D. From dns manager,modify the forwarders properties of server1E. Create a forward lookup zones named “”F. Run dnscmd.exe and specify the /config parameter